CVE-2005-2058 - CVE House

Back to Database

Status published High CVE-2005-2058

Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta...

7.5 CVSS

Vulnerability Description

Multiple SQL injection vulnerabilities in Infopop UBB.Threads before 6.5.2 Beta allow remote attackers to execute arbitrary SQL commands via the Number parameter to (1) download.php, (2) modifypost.php, (3) mailthread.php, or (4) notifymod.php, (5) month or (6) year parameter to calendar.php, (7) message parameter to viewmessage.php, (8) main parameter to addfav.php, or (9) posted parameter to grabnext.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-2058

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from ubbcentral

View All →

Cross-site scripting (XSS) vulnerability in forums/ubbthreads.php in UBB.threads 7.5.6 and...

SQL injection vulnerability in dosearch.inc.php in UBB.threads 7.3.1 and earlier...

SQL injection vulnerability in ubbthreads.php in Groupee UBB.threads 6.1.1 and...

Groupee UBB.threads 6.5.1.1 allows remote attackers to obtain sensitive information...

Multiple direct static code injection vulnerabilities in Groupee UBB.threads 6.5.1.1...

Affected Vendor

ubbcentral

View all reports →

Affected Software

ubb.threads

Vulnerable Versions:

6.0, 6.0.1, 6.0.2, 6.0.3, 6.1, 6.1.1, 6.2, 6.2.1, 6.2.2, 6.2.3, 6.3, 6.3.1, 6.4, 6.4.1, 6.4.2, 6.4.3, 6.4.4, 6.5, 6.5.1, 6.5.1.1

Timeline

Official Publish: June 28th, 2005

Last Modified: August 7th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.